Collaborate Disseminate
A common opinion seems to be that manual port forwarding is "safer" than UPnP, because with UPnP enabled a device can expose ports to the internet at a whim. That’s why so many security guides advise you to disable UPnP ASAP. 1 2… Continue reading Isn’t manual port forwarding actually less safe than UPnP?
I’m testing a type of DDOS attack, named SSDP reflection attack on my virtual environment. I installed miniupnpd service on a debian and lubuntu virtual machines which they are acting as my upnp devices. I also use my access point as anoth… Continue reading SSDP reflection DDOS
I’m testing a type of DDOS attack, named SSDP reflection attack on my virtual environment. I installed miniupnpd service on a debian and lubuntu virtual machines which they are acting as my upnp devices. I also use my access point as anoth… Continue reading SSDP reflection DDOS
I am trying to use something called Moonlight, which streams desktop to tv through Nvidia Shield (for playing pc games on Shield). However, it requires certain ports to be open for access (TCP 47984, TCP 47989, TCP 48010, UDP 47998, UDP 47… Continue reading Is it more secure to enable upnp or to forward specific ports you need open?
I’m the sole person who has access to this router. I turned uPnP off and have twice found it turned back on in recent weeks. The Router is Asus DSL-AC68U.
I have a VPN running at the router level, installed about a month ago. I’ve recently… Continue reading What could re-enable uPnP on router apart from malware?
I was fiddling with my router’s uPnP settings and found this:
Why is an external IP address showing here?
I also did a reverse IP search and to my surprise the IP 25.54.27.39 showed "UK Ministry of Defence". I am not in the UK m… Continue reading Why is uPnP settings in router showing external IP address and WhatsApp as app description?
By Ryan Victory, Corelight Security Researcher On June 8, Yunus Çadırcı, a cybersecurity senior manager at EY Turkey released a whitepaper and proof of concept code repository for a newly discovered vulnerability in the Universal Plug an… Continue reading Detecting the New CallStranger UPnP Vulnerability With Zeek
Stop us if you’ve heard this before but a researcher has uncovered a new security vulnerability affecting many devices running the Universal Plug and Play (UPnP) protocol. Continue reading Billions of devices affected by UPnP vulnerability
Recently I bought an IPcamera in order to test its security. Unfortunately, it just has 2 ports open :
554/tcp RTSP
5000/tcp UPnP
I was pretty sure the ipcamera would poke my router and open up internet facing port (that’s what UPnP is… Continue reading How does my ipcamera work despite UPnP disabled on home router? [closed]
I am watching my LAN traffic a bit to see if or what a new Chinese phone on the LAN does.
I turned off uPnP on the internet router but see SSDP in some traffic. Curiously, that is (as far as I understand) a version of uPnP bu… Continue reading Can SSDP still be enable after turning off uPnP?